An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-devel | Oct 17, 2023 | Sep 29, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Sep 29, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 15, 2023 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel | Nov 15, 2023 | Sep 29, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-6.2.0-1015-awsUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-starfiveUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-36-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1049-azureUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04 | Oct 6, 2023 | Sep 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub